Privacy Policy

1. Overview and Core Philosophy

Your privacy is of paramount importance. AA Anything is engineered under principles of data minimization and privacy-by-design. We do not sell, rent, monetize, or harvest personal data.

No Account Required for Standard Free Use: You can download and use all standard free compatibility features (such as patching verified media players like VLC) completely anonymously without creating an account, without signing in, and without providing any payment information.

2. On-Device Processing (No App Data Uploaded)

All core APK patching operations—including package unpacking, Android manifest inspection, display metadata adjustments, and cryptographic package re-signing—are executed strictly on your local device.

• No application files, APK binaries, login sessions, or private data from other applications are ever uploaded to or processed by our servers.
• Your signing configurations and cryptographic keys generated by the Application reside exclusively in your local device's isolated application storage.

3. Information We Collect and Network Communications

A. Minimal Aggregate Telemetry (Self-Hosted Umami)

To verify service availability and monitor general adoption, the Application connects to a privacy-first, self-hosted analytics instance:

• No Cookies or Tracking Fingerprints: The service does not use browser cookies or harvest device fingerprints.
• No IP Address Logging: IP addresses are never retained or stored in database records.
• Pseudonymous Installation Identifier: To ensure accurate count deduplication without tracking individual identities, the Application generates a random, app-specific pseudonymous installation identifier (UUID) stored locally. This identifier contains no hardware-level serial numbers and cannot be used to trace personal identity.
• Collected Events: Records only general aggregate statistics such as the frequency of application launches and active application version numbers.

B. Application Update Checks (GitHub API)

The Application periodically queries the public GitHub Releases API to check whether a newer version of the software is available.

• These requests retrieve public release metadata only.
• No personal data, user credentials, or device identifiers are transmitted during update checks.

C. User Account & Authentication (Paid Pro Tier Only)

Signing in is optional and only required if you choose to activate paid Pro features to manage your subscription across devices:

• Authentication Infrastructure: Account verification is powered securely by Google Firebase Authentication.
• Data Processed: Only when you actively choose to sign in (such as via Google Sign-In), Firebase processes your verified email address, a unique Firebase User ID (UID), and authentication timestamps (e.g., account creation and sign-in timestamps).
• When Not Signed In (Free Tier / Anonymous Use): If you are not signed in, the Application never connects to or communicates with Firebase servers. Authentication is completely bypassed, and zero account or identity data is collected or transmitted.

D. License Verification & Anti-Abuse Protection (Paid Pro Tier Only)

When an authenticated Pro user accesses licensing features, the Application securely communicates with our verification backend (hosted on Cloudflare infrastructure):

• License Synchronization: Synchronizes cryptographically validated tokens to confirm active subscription status.
• App-Generated Device Identifier: To prevent unauthorized license sharing and ensure smooth device transfers, the Application generates a random, app-specific device identifier stored locally. This is not a hardware identifier (such as an IMEI or MAC address) and is used strictly to enforce fair simultaneous device limits and active licensing integrity.
• Transient Rate Limiting: Transient network metadata may be processed temporarily by Cloudflare edge servers to protect the API infrastructure against abuse and denial-of-service attacks.

E. Billing & Payment Processing via Stripe (Paid Pro Tier Only)

Subscription billing is processed directly through Stripe, Inc.:

• We never collect, handle, or store credit card numbers or banking credentials. All payment details are processed under Stripe's own security standards (Stripe Privacy Policy).
• Your email address and Stripe customer reference are linked with your authentication account strictly to provision Pro privileges and grant access to self-service subscription management in the Stripe Customer Portal.

4. Third-Party Service Providers

We do not share your data with advertising networks or data brokers. Third-party providers are utilized strictly for core operational infrastructure:

• Cloudflare, Inc.: API gateway security, edge distribution, and transient threat mitigation.
• Google Firebase (Google LLC): Identity management and secure authentication for Pro tier users (Firebase Privacy & Security).
• Stripe, Inc.: Secure payment processing and subscription lifecycle management.
• GitHub (GitHub, Inc.): Hosting application release packages, project documentation.

5. Data Retention and Account Deletion

Authentication and licensing records are maintained only as long as your account remains active. You maintain full ownership over your data:

• Account Deletion: You may request permanent deletion of your account and associated authentication records at any time directly through the contacting us via our contact form at https://kododake.com.
• Upon account deletion, your authentication record and active licensing links are permanently purged from our systems. Ongoing recurring subscriptions may be cancelled via the Stripe Customer Portal prior to account deletion.

6. International Users & Privacy Rights (GDPR / CCPA)

Under applicable international privacy frameworks (including GDPR):

• Pro users retain the right to access, review, or request deletion of their personal identity records (email address and account authentication identifier).
• Users who are not signed in (free-tier / anonymous users) remain fully anonymous, as no personal account profiles, Firebase records, or identifiable dossiers are collected or maintained.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational or architectural improvements. Updates will be published directly in the documentation repository and official website.

8. Contact and Inquiries

For privacy inquiries, data deletion requests, or technical support, please contact us via our official channels:
• Official Website & Contact Form: https://kododake.com
• GitHub Repository: https://github.com/kododake/AAAnything